phishing

Fake App and Login Screens Target China Construction Bank Customers
The Hong Kong Monetary Authority has issued an alert regarding fraudulent websites, mobile apps, and phishing login screens impersonating China Construction Bank (Asia).

HKMA Issues Scam Alert Over DBS Bank Phishing Messages
The Hong Kong Monetary Authority warned the public about phishing instant messages targeting DBS Bank (Hong Kong) Limited.

How to Recognize and Report Phishing Safely with CISA
Learn how to spot and report phishing emails and texts to protect your personal and financial information using official guidance from CISA.

HKMA Warns Public Over PayPal Hong Kong Phishing Messages
The Hong Kong Monetary Authority alerted the public to phishing instant messages connected to PayPal Hong Kong Limited.

Hong Kong DH Probes Misuse of HIV Testing Service Email Account
Hong Kong's Department of Health suspended its HIV testing website after unauthorized messages falsely warned recipients of exposure to HIV.

EU Probes Booking.com Over Scams and Ad Transparency
The European Commission opened formal Digital Services Act proceedings to examine Booking.com's handling of fraudulent listings, phishing scams, and sponsored search rankings.

HKPF Warns Public of Fake eTraffic Ticket Phishing Sites
The Hong Kong Police Force warns citizens about fraudulent websites and phishing messages falsely claiming to offer discounts on traffic fines.

How to manage your passwords safely with a password manager
The UK National Cyber Security Centre explains how to store unique passwords in a browser or third-party password manager, and why it now recommends passkeys first.

Microsoft: Phishing Campaigns Abuse MSP360 RMM for Persistent Access
Microsoft Defender Experts says attackers used fake meeting and PDF lures to install legitimate MSP360 remote management software, then added ScreenConnect as a backup channel.

Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.